Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20738.roa
File: AS20738.roa (raw, json)
Hash identifier: t4RGqvLNoJR9Iuu9jzqXU1JPy1Qr48dEy43IIIvRqNw=
Subject key identifier: 53:53:E0:64:83:34:24:EF:40:68:30:7A:5E:E6:FA:44:31:4E:E3:44
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 31B6ADB7D47A80AE643E198F2656966DFF279A4B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20738.roa
Signing time: Fri 23 Oct 2026 12:46:14 +0000
ROA not before: Fri 23 Oct 2026 12:41:14 +0000
ROA not after: Fri 22 Oct 2027 12:46:14 +0000
asID: 20738
IP address blocks: 84.75.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b6:ad:b7:d4:7a:80:ae:64:3e:19:8f:26:56:96:6d:ff:27:9a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 23 12:41:14 2026 GMT
Not After : Oct 22 12:46:14 2027 GMT
Subject: CN=5353E064833424EF4068307A5EE6FA44314EE344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:9e:64:c5:c5:04:9b:aa:6e:9a:80:3e:e5:
6b:3d:0b:46:07:da:16:ff:ab:bb:98:87:1d:08:91:
29:20:1e:d1:95:a9:ef:09:37:5d:a9:ae:43:35:ad:
17:31:99:2f:81:33:ab:e2:2f:3c:93:6c:09:9c:f1:
80:1e:1e:ef:a7:dc:e9:e6:d5:12:d0:43:fc:ef:12:
3a:e8:7c:8a:57:2d:c6:6d:3d:cf:c9:0b:77:3d:1f:
de:17:ab:7b:58:39:06:e8:9e:3e:79:a5:06:12:1b:
c2:81:79:aa:79:71:b5:77:69:2e:3a:d9:1b:ee:a6:
1e:dc:b5:d2:1f:6f:28:87:8f:4b:fb:34:43:3e:5b:
b7:4e:12:39:63:10:90:30:c9:1b:b6:76:82:1e:23:
f1:e4:a7:f7:45:5e:d2:ce:4a:ff:fd:12:66:85:60:
ac:da:d5:58:72:e0:bb:63:1b:99:ff:a2:5f:c5:59:
29:e1:f3:ac:fe:33:a0:8a:c0:ac:64:a0:b6:2b:5e:
bd:bb:f8:75:67:de:22:37:ab:78:3c:c4:92:60:00:
0c:1c:59:23:4e:7c:db:59:20:19:b1:f0:81:99:0c:
52:6c:f4:e5:23:6d:9f:cf:e3:00:5b:b4:ed:71:16:
dc:ff:f5:e9:ee:3e:ec:75:44:18:2c:2d:dd:93:95:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:E0:64:83:34:24:EF:40:68:30:7A:5E:E6:FA:44:31:4E:E3:44
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS20738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.222.0/23
Signature Algorithm: sha256WithRSAEncryption
21:bf:67:72:75:ad:70:0d:8a:fa:6c:d0:18:dc:9f:85:2f:9b:
5d:a2:90:0c:81:43:ce:99:f2:f0:de:34:94:54:38:c3:d5:6a:
3c:82:8b:f0:f1:08:68:e5:01:81:bd:c5:71:6f:e7:58:99:3c:
3a:5f:7b:d1:73:31:b3:38:91:ea:59:74:df:dc:64:27:67:87:
d2:af:42:d3:82:26:bb:6f:ed:fd:3c:ef:06:ec:2e:94:13:29:
ac:46:cc:86:0d:83:37:b9:3f:2a:54:ed:3a:cb:00:00:c0:16:
52:0a:f0:18:1b:27:13:21:8f:f4:11:27:48:66:f8:7e:b4:70:
22:f1:c8:13:5b:f5:87:93:9b:b5:f0:81:e9:b8:39:55:59:a2:
b8:5b:fe:a4:ef:2d:c6:00:4d:27:53:5a:1d:75:11:48:4b:8d:
3b:ff:0a:5c:4c:e7:c3:e1:b2:e1:ee:1d:cd:c6:90:06:fa:1a:
5b:8e:07:44:84:c6:e8:b0:da:60:fa:f9:c6:99:45:b0:04:e2:
45:56:9e:d6:ca:d5:13:7e:3d:3f:09:43:19:c9:b6:08:9f:92:
1f:d1:d9:93:49:d7:dd:6c:6f:3b:96:05:9a:71:36:df:30:69:
9f:b1:f9:f1:7b:56:b7:80:d7:c4:ec:71:20:b7:86:4f:ca:ea:
d6:70:1a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:56:48 2026 by rpki-client